Hi feross. Please note that Android 4.4.2 (KitKat) does support TLS 1.2. As you can see at http://www.appbrain.com/stats/top-android-sdk-versions (A good gauge of android distributions), KitKat is the most used Android distribution, followed by 5.0 (Lollipop). So, the actual percentage you are looking at is ~25%, but that's also for the native Android browser. Note that the API kits for these versions actually DO support TLS 1.2, when you look at the documentation for http://developer.android.com/intl/zh-cn/reference/javax/net/.... , you can see this is supported in SDK 16+ so custom apps most likely already use TLS 1.1+. Now, we know this is hard. We know some users will be impacted by this; however, this is how security moves forward. We will continue to monitor our customers and work with them hand in hand to make sure the transitions are as smooth as possible.

The support matrix for TLS can be found at: https://www.ssllabs.com/ssltest/clients.html